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REMARKS 



Hiis housekeeping amendment is a dupUcate of the Amendment filed in response to the 
aforementioned non-final Office Action (hereafter "Office Action") in relation to the Reissue 
Application for U.S. Patent No. 5.848,159 (hereafter the "original patent"). All changes 
presented herein have been made vis-i-vis the original patent to be issued. 

T. Reexamination Procef dings and Re i«iie Application Merged 

Merger of the Reexamination proceedings 90/005.733 and 90/005,776, with respect to the 
original patent and the Reissue Application 09/694,416 (for the reissue of the original patent) is 
hereby acknowledged (See: Section 1 in the Detailed Action of the Office Action). M keeping 
with the procedures set forth for handling the merged proceedings, and to maintain prosecution 
and examination consistency between the Reissue and Reexamination proceedings. Applicants 
will submit a separate Housekeeping Amendment in each of the Reexamination proceedings. 

Tl. Status of the Claims 

As of the date of this Amendment, claim 8 of the original patent is canceled, claims 1-7 
and 9-13 of the original patent are amended and remain pending; new claims 14-61 were added 
in the preliminary amendment and. of these claims, claims 14-40. 42. 43. 45-47. 50-56 and 58-61 
are hereby amended. Thus. H.i^. 1-7 and 9-61 are now pending in the Reissue Application. 

ITT. Claim Designated for Printing i " ♦^'^ Official Gazette 

Claim 1 is designated for printing in the Official Gazette upon allowance of this Reissue 
Application. 

TV Statement nf Si.nnort for th ^ a ^pnHments in the Disclosure of the Oripinal Patent 
A. All changes made vis-^-vis the original patent 

All the amendments presented herein, including amendments to the written description 
and the claims, have been made vis-a-vi^ the original patent. Accordingly, the amendments 
presented herein include the amendments previously presented in the Preliminary Amendment, 



Reexamination 90/005,776 
Collins et al. 



37 



Attorney Docket No.: 20206-127 (PT-TA-410-5) 

which was filed concurrently with this Reissue Application, to the extent that such amendments 
are to be maintained. Moreover, the statements of support for the amendments herein, even if 
some have already been stated before in the Preliminary Amendment and repeated herein, are 
provided in their entirety for completeness and clarity. 

B. The Specification 

The specification of the original patent has been amended to correct typographical errors 
and other matters of fonn and to render the specification consistent throughout and with the 
claims. Support for the amendments to the specification may be found throughout the original 
patent. No new matter has been introduced by the amendments to the specification. 

In general, changes embodying corrections of typographical errors and other matters of 
form are self-explanatory and need no further explanation. As to the mathematical expressions, 
equations expressing any congruence of the form b=c(mod m) or the like, where b is congruent 
to c and wi is the modulus, are mathematically written in proper form as c(mod m) . 
Accordingly all the equations are written in proper form, e.g., CsM*(mod «). Were applicable, 
the parentheses (e.g., around "mod «") are properly added as well. 

Support for amendments to the paragraph beginning at column (hereafter "col."), line 4 
may be found in col. 1 of the cover page. Support for the amendments to the paragraph 
beginning at col. 3, line 23 and the paragraph beginning at col. 3, line 27 may be found for 
example at col. 2 of the cover page and col. 13, lines 44-47. 

Support for amendments to the paragraph beginning at col. 3, line 36, may be found at 
column 5, lines 31-33. Support for amendments to the paragraph beginning at col. 3, line 56, 
may be found for example at col. 3, lines 20-26, col. 3, lines 44-55 and col. 4, lines 9-1 1 . Support 
for amendments to the paragraph beginning at col. 4, line 6, may be found for example at col. 
3,lines 20-26, col. 4, lines 6-12, 32-34 and 52-56. 

Support for amendments to the paragraph beginning at col. 4, line 13 and the paragraph 
beginning at col. 4, Ime 50, may be found for example at col. 3 line 42, col. 4, line 41, and col. 
10, lines 54-56. Further support for amendments to the paragraph beginning at col. 4, line 50 
may be found at col. 4, lines 50-52. 
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Support for paragraph inserted before the paragraph beginning at col. 5, line 52, may be 
found for example at col. 14, lines 30-36 and 45-49. Support for amendments to the paragraph 
beginning at col. 5, line 30, may be found for example at col. 2, lines 5-10, col. 3, line 42, col. 4 
line 41, col. 5, line 39, col. 10, line 65 and col. 11, lines 8-9. Further support for amendments to 
the paragraph beginning at col. 5, line 30, may be found in the muhitude of mathematical 
expressions where d, the private key portion, is the "exponent," e.g., M= C''(mod n) at col. 6, 
lines 1-5. 

Support for amendments to the paragraph beginning at col. 6, line 24, may be found for 
example at col. 5, lines 31-33, col. 6, line 37 ("M=yjt. . col. 7, line 15, and col. 11, lines 15-20. 
Support for amendments to the paragraph beginning at col. 6, line 65, may be found for example 
at col. 6, lines 1-4, 26-35, 40-53 and 67. Support for amendments to the paragraph beginning at 
col. 7, line 1, may be found for example at col. 2, lines 32-34 and 40, col. 3, lines 22-26, col. 4, 
lines 32-34, col. 6 line 38 and col. 7, lines 56-58. 

Support for amendments to the paragraph beginning at col. 8, line 1, is fund in col. 8 line 
3 (i.e., FBPS 140-1 with level 3 is a well known standard. See: 

http://csrc.nist.gov/fips/fipsl401.htm). Support for amendments to the paragraph beginning at 
col. 10, line 15, may be found for example at Figure 3. Support for amendments to the paragraph 
beginning at col. 10, line 35, may be foimd for example in col. 10 line 40 and line 53 (i.e., M is 
represented by a numerical value greater than 0 and smaller than n). 

C. The Claims 

Claims 1-7 and 9-13 of the original patent have been amended to correct typographical 
errors and other matters of form, to explicitly recite subject matter which is implicitly included in 
the claimed invention, and/or to more clearly and particularly recite the subject matter which 
Applicants regard as their invention. New claims 14-61 have been added to further point out and 
distinctly claim the subject matter that Applicants regard as their invention. 

For the Examiner's convenience, a clean version of the amended claims (as now 
presented) is provided herewith as Exhibit A . As stated above, the amendments herein are made 
vis-a-vis the original patent (notwithstanding the prior changes to the claims in the Preluninary 
Amendment). But to show the difference between the claims presented in the Preliminary 
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Amendment and the claims presented herein a mark-up version showing the changes relative to 
the Preliminary Amendment is provided as Exhibit B. 

Support for the amendments to claims 1-7 and 9-13 and for the added claims, 14-61, may 
be found throughout the original patent. No new matter has been introduced by this amendment. 

In general, claim amendments embodying corrections of typographical errors, antecedent 
basis errors, and other matters of form are self-explanatory and need no fiirther explanation. As 
to the mathematical expressions, equations expressing any congruence of the form fc=c(mod m) 
or the like, where b is congruent to c and m is the modulus, are mathematically written in proper 
form as c(mod m). Accordingly all the equations are written in proper form, e.g., C^M\mod 
n). Were applicable, parentheses (e.g., around "mod n") are properly added as well. 

Also, by and large, claim amendments representing a change to the preamble of the 
original and new (added) independent claims find support throughout Applicants' original patent. 
Particularly, support for the recitation oi communications of a message cryptographically 
processed with RSA (Rivest. Shamir & Adleman) public key encryption, is implicitly present in 
the mathematical expressions throughout Applicants' original patent. Additionally, support for 
this recitation is expUcitly present in the summary at col. 3 and col. 4, in tiie detailed description 
at col. 5 et seq. as well as in tiie Rivest patent (4,405,829) which is incorporated by reference into 
the original patent (See, e.g., col. 1, lines 56-63). Accordingly, this particular amendment will 
not be addressed again with respect to each individual claim. 

Support for the amendments to claim 1 as now presented may be found, for example, at 
claims 1, 5 & 6 as presented in the original patent as well as at col. 1, lines 32-42 & 43-54, col. 3, 
lines 7-12, 22-25 & 39-44, col. 4, lines 6-8 & 32-48, col. 5, lines 30-36, 40-46 & 58-63. and col. 
10, lines 25-34. Support for the amendments to claim 2 as now presented may be found, for 
example, at tiie original claims 2 & 4 as well as at col. 5, lines 36-50. Similarly, support for 
amendments to claims 3-7 and 9-13 as now presented may be found, for example, at claims 1-7 
and 9-13 as presented in the original patent. Further support for the amendments to claims 3-7 
and 9-13 as now presented may be found for example at col. 1, lines 32-42 & 43-54, col. 3, lines 
39-44, col. 5. lines 30-50, col. 7, line 44 to col. 10, line44. Further support for amendments to 
claims 9-13 as now presented may be found for example at col. 9, lines 16-23 & 47-58. 

As to tiie newly added claims, support for claim 14-23 and 40-59 may be found, for 
example, at col. 1. lines 32-45, col. 3. lines 30-50. col. 4. lines 32-49, col. 5. Unes 30-51. col. 5. 
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line 66 to col. 6, line 25, col. 7, line 44 to col. 10, lines 44. Further support for new claims 14-23 
and 40-59 may be found at claims 1-13 as presented in the original patent. For example, support 
for new claims 18 and 19 may be found in claim 9, i.e., col. 14, lines 30-36. Also, support for 
new claims 24-39 may be found for example at column 3, lines 36-65, col. 4, lines 8-12, 32-38 & 
50-56 and col. 5, lines 58-63. Support for new claims 42-52 may be found at Figures 1-3, and the 
accompanying description at col. 7, line 34 to col. 10, lines 44. Further support for new claims 
50-54 may be found at col. 5, line 52 to col. 6, line 6. Finally, support for claims 60 and 61 may 
be found at col. 4, lines 6-13 and col. 5, lines 61-63. 

V. Supplemental Reissue Oath and Declaration 

Applicants appreciate the reminder about a Supplemental Reissue Oath and Declaration 
(See: Section 3 in the Detailed Action of the Office Action, or simply Section 3 of the Office 
Action). Applicants will submit that Oath and Declaration docviment at the close of prosecution, 
after allowance of this Reissue Application. 

VI. Consent bv Assignee. Certificate Establishing Ri2hts of Assig nee, and Assignments 
hi reference to Sections 4 & 5 of the Office Action, where it is stated that the Reissue 

AppHcation is objected to as lacking written consent of all assignees, including Tandem 
Computers hic. ('Tandem") and Compaq Computer Corp. ("Compaq"), AppUcants point out that 
the requirements under 37 CFR §§1 .172 & 3.73 have been met. For the Examiner's convenience 
Exhibit C includes a copy of docvraients which show compliance with these requirements, 
including: Consent of Assignee to this Reissue Application . Certificate under 37 CFR 3.73(b), 
Notice of Recordation of the Assignment from the inventor s to Tandem and Notice of 
Recordation of Merger Documents relating to the merger of T andem into Compaq. A copy of the 
stamped return postcard showing filing the said documents is also provided. 

To recap, the inventors (Collins et al.) assigned their invention (U.S. Application No. 
08/784,453) to Tandem, which Assignment has been recorded on May 7, 1997 at Reel/Frame 
8542/0875 . In turn. Tandem assi^ed its Patent Applications and issued Patents to Compaq when 
Tandem merged into Compaq. To that end, the Merger Documents have been filed with the 
Assignment Division in relation to the aforementioned U.S. Patent 5,848,159 (which issued fix)m 
the 08/784,453 Application to Collins at al. on December 8, 1998, and the reissue of which is 
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now being sought). As the enclosed Notice of Recordation of the Merger Documents indicates, 
the Merger Documents have been recorded on October 16, 2000 at Reel/Frame 01 1 190/0457 . 

Accordingly, all the requirements under 37 CFR §§1 .172 & 3.73 have been met. 
Respectfully, in view of the foregoing the objection to this Reissue Application should be 
reconsidered and withdrawn. 

VII. The Drawings 

In reference to Section 6 of the Office Action, where it is stated that new formal drawings 
are required. Applicants hereby comply. Attached herewith are new formal drawings, including 
Figures 1-3. 

VIIL Preliminary Amendment Entered 

In Section 7 of the Office Action it is indicated that the Preliminary Amendment, filed 
concurrently with this Reissue Application, has been entered. Applicants appreciate entry of the 
Preliminary Amendment and note that, notwithstanding, this amendment introduces changes vis- 
a-vis the original patent as required by 37 CFR §1.1 73(g). 

IX. Three Information Disclosure Statements Considered 

In Section 8, the Examiner states that the information disclosure statements (IDSs) filed 
April 11, 2001 (4 references) and June 26, 2001 (2 references), respectively, where considered 
(on December 5, 2001 & June 4, 2002, respectively). On December 5, 2001, The Examiner 
considered also, but failed to mention, the IDS (13 references) filed concurrently with this 
Reissue Application. A copy of all three IDS was signed by the Examiner and returned with this 
Office Action. A copy of the three, signed IDSs is provided for the Examiner's convenience as 
Exhibit D . 

X. Obiection to the Specification 
A. New Matter 

Section 10 of the Office Action indicates that the [preluninary] amendment to the 
specification has been object to under 35 U.S.C. §132 having allegedly introduced new matter to 
the specification. In particular, the objection to the added material at col. 5, line [62] relating to 
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'digital signatures' alleges that digital signatures have not been disclosed in the originally-filed 
specification (implicitly or explicitly). 

However, the Examiner is kindly requested to note the recitations in claims 9 and 10 of 
the original patent. Likewise, it is implicit in RSA schemes, as disclosed in the original 
specification (e.g., col. 1, lines 55-62), that C= M" (mod n) [orM^ M'' (mod «)] produces a 
value typically referred to as the "signature" (as the private key d is used in the encryption). 
Indeed, in col. 1 0, lines 35-37 & 42-44 it is suggested that a plaintext message can be 
encrypted/decrypted usmg the public/private key RSA scheme. Moreover, smce the original 
patent incorporates by reference U.S. Patent 4,405,829 (See: Col. 1, line 61), the Examiner is 
kindly requested to also note, in the '829 patent, col. 3, line 9 et seq. col. 5, lines 45-47, and col. 
8 line 56-67. 

Namely, the aforementioned amendment to Col. 5 relating to the signature merely 
expresses that which is implicit and/or imports that which is incorporated by reference. 
Accordingly, its is respectfully submitted that no new matter has been introduced by the 
aforementioned amendment to Col. 5 relating to the signature. A reconsideration and withdrawal 
of the new matter objection under 35 U.S.C. §132 is hereby sohcited. 

B. Informalities 

As indicated in Sections 1 1-13 of the Office Action, the specification is objected to 
because of the error in equation 4 in the paragraph starting at col. 2 line 19, and because of a 
misstatement of line number [52] at col. 8. Applicants appreciate the Examiner's thorough 
review of the original patent and Preliminary Amendment and have corrected these deficiencies. 
As now presented equation 4 correctly recites: 
M= C^fmod ri) (4), 

and the line number of the paragraph at col. 8 is changed to 62. The specification is now believed 
to be correct, and reconsideration and withdrawal of the objection to the specification based on 
informalities is hereby respectfiiUy solicited. 

XI. Claim Objections 

In Sections 14-17, the Examiner points out deficiencies in amendments to claim 3 as 
presented in the preliminary amendment. Claim 3 has been amended in accordance with the 
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mark-up version of the claims as shown herein above and is now believed to be correct (See, 
e.g., Mx" <ny-l, and C, (mod«,)). Accordingly, reconsideration and withdrawal of the 

claim objections is respectfully requested. 

XTT. Claim Rej^rtinn. under 35 H S r. 81 01 : Rejections Rendered Moot by Amendments 
Sections 18-21 of the Office Action indicate that claims 7, 8 and 13 are rejected under 35 
U.S.C. §101 as lacking utility (See: Sections 18-21 of the Office Action). Although the 
comments immediately below address these claim rejections, as later explained, the rejections 
have nonetheless been rendered moot by the claim amendments as presented herein above. 

With reference to these rejections, the Examiner asserts that an invention that is usefiil for 
encryption gnh fails to provide utility and is of no use if it cannot be decrypted. AppUcants 
respectfully disagree with the Examiner's characterization of the claimed invention (as recited in 
the earlier claim 7) and in view of that disagree that the claimed invention lacks utility, hideed, 
as previously presented claim 7 did not provide o«/y for encgMs. and did not preclude decoding 
(and claim 8 (now cancelled) explicitly recited a decoding key Di for each tenninal). 

The Examiner also notes that the invention is directed, in general, to increasing the 
efficiency of an RSA cryptographic system and method. And. it is true that increasing the speed 
of encryption (by reducing the number of computation cycles) is useful, as the Examiner points 
out. Moreover, claim 7 as previously presented recited a method for 'estabUshing cryptographic 
communications' and encryption establishes cryptographic communications. Namely, the 
invention as recited in the earlier claim 7 produced the specifically useful result claimed by 
Applicants. Hence, earlier claims 7 and 8 did not lack utility. 

Notwithstanding the foregoing, the claim rejections have been rendered moot by the 
claim amendments herein above. As will be later discussed in more detail, the claims have been 
amended (as shown herein above) to expUcitly claim "communications of messages 
cryptographically processed with RSA public key encryption" (as is well known, RSA stands for 
Rivest, Shamir and Adleman). To be sure, a message can contain, for example, a DES key (data 
encryption standard key). Then, in accordance with this invention each messages, even if 
containing a DES key, is cryptographically processed using the RSA scheme. 
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It is respectfully submitted that all the claims produce the results claimed by Applicants 
and hence have utility. Accordingly, the claim rejections under 35 U.S.C. §101 should be 
reconsidered and withdrawn. 

A. Enablement, 35 U.S.C. 112,1° paragraph 

Clain« 8 and 13 are rejected under 35 U.S.C. 1 12, 1« paragraph, for lack of enablement 
(See- Sections 23-25 of the Office Action). Claim 8 has been cancelled without prejudice or 
surrender of subject matter and will not be discussed here. Claim 13, however, remains pendmg 
and is enabled by Applicants" disclosure including the disclosure that Applicants incorporated by 
reference into the written description. Claim 13 is enabled, for example, by the description m the 
origimd paten, at col. 1, fees 54-55 and col. 7, lines 25-33, and in the 4,405,829 patent at col. 13, 
lines 29-46. Accordingly, reconsideration and withdrawal of the claim rejection under 35 U.S.C. 
1 12, 1" paragraph is hereby respectfiilly requested. 

B. Distinctly Claimtog AppHc«.ts' Inyention, 35 U.S.C. 112, 2- paragraph 
In Sections 26-30 of the Office Action the Examiner indicates that claims 24-39 are 
rejected under 35 U.S.C. 112, 2- paragraph. However, Ure claim amendments obviate these 
claim rejections as the terms "faster than..." and "compatible with..." are not recited and the 
tem, "fewer computation cycles..." for multi-prime RSA is recited comparatively to the cycles 
for two-prime RSA. Applicants behevc that given the above-outlined amendments to claims 24- 
39 Applicants- invention is particularly pointed out and distinctly claimed. Moreover, as 
mentioned in Section W.C above, support for these claims is found in Applicants' disclosure. 
Accordingly, reconsideration of tire claim rejections under 35 U.S.C. 112, 2"- paragraph is 
hereby respectfully requested. 

YTV. THE INVENTION 

Before getting to the claim rejections in the next section (XV) an explanation of the 
invention is worthwhile. It is important that the invention be properly understood particularly m 
view of the assertions and analysis in the Office Action. 
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First, even though it is clear from the mathematical expressions throughout Applicants' 
disclosure, including the claims, that the invention involves RSA public key encryption, the 
claims have been amended to expressly point this out. As now presented, the claims make it 
expressly clear that they involve messages that are crypto graphically processed with RSA public 
kevencrvption . Having said that, important aspects of the claimed invention are further explored. 

Note for example claim 1. The clean version of claim 1 as now presented reads as 
follows: 

1 (Twice Amended) A method for commxinications of a message 
cryp^graphTcally processed with RSA ( Rivest. Shamir & Adleman) publxc 
key encryption, comprising the steps of: „v,^i-*» k is 

developing k distinct random prime numbers pr, P2. - ■ ■ Pk. where k is 
an integer greater than 2 ; 

providing a number e relatively prime to (pi -1)-(P2 -1) w (p^-D ; 
providing a composite number n equaling the product prPa- • • • ••P|'' 
?Leivini a ciphertext word signal C which is formed by encoding a 

plaintext message word signal M to a ciphertext word signal C 
where M corresponds to a number representative of the message and 

where^ is a number representative of an encoded form of the 
plaintext message word signal M such that 

Cfe M * (mod n), and where e is associated with an intended 
recipient of the ciphertext word signal C; and ^ . ^ , , 
deciphering the received ciphertext word signal C at the intended 
recipient having available to it the k distinct random prime 

numbers Pi/ P2# • • - Pic- 

In essence, claim 1 recites a method in which a message M is cryptographically processed 
(encoded) using the public key of a recipient (e.n). The encoded message C= (mod n), known 
as ciphertext, is received in that form ...ui^nnt fiirther modification by the recipient. That same 
(received) ciphertext C, is indeed decipherable by the recipient (using its private key {d,n)). As 
is next explained, the recipient has available to it the k factors from which the modulus n is 
produced. 

The recitation in claim 1 includes Hpvelo ping k distinct random prime numbers p/, .e2^ 
£^ where k is an integer greater than 2 md Mier includes the fact that the modulus n is a 

..n. pn.ite number cq ^-l^^r F"^"^^ ' ' ^"^^^y- ^ ^ 

prime numbers are r..Hnm and distinct . Moreover, claim 1 recites that the modulus n is provided 
from a product of the k prime numbers. Contrast this (claim 1) recitation with selecting a 
mnHiilns n and then factoring n to th ^ ^ prime numbers. 
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It is important to understand and keep in mind that providing n as the product of/^y-p^- • • 
. .p, having [already] available the k prime numbers makes it possible for them to be random and 
distinct. The randomness and distinctness attributes of the k prime numbers will materially 
improve the security in any cryptographic system with RS A public key encryption. 

Moreover, the use of k>2 prime numbers allows improved efficiency of such system. As 
one would imagine, developing three or more prime numbers each of smaller size (relative to 
each of a pair of primes for the same size n) takes fewer computation cycles than it would take 
for developing the pair of (larger) prime numbers. As an additional time-saving benefit, the k 
prime numbers allow parallel processing of encryption tasks. 

By analogy, in each of the other claims (original and added claims) n is a product of the k 
prime factors, where A>2 and where the k prime factors are random and distinct Again, contrast 
this with selecting a modulus n and then factoring n to A: prime numbers (even if n were 
randomly selected). In addition, claims, including claims 2-6. 9. 11, 15. 16 etc., indicate that d 
(the private key portion) is established as a function of. (the public key portion) and the k prime 
numbers. As recited for example in claim 2, is a multiplicative inverse of e(mod(lcm(p. -1. P2 
-1... Pk-1))); and, again, the fc(it>2) distinct random prime numbers py,/.^, . . . from which the 
modulus 71 is provided/computed are used for estabUshing d. 

Within the scope and spirit of the invention as originally disclosed one would also 
recognize such variations as recited for example in claim 7. A clean version of claim 7 reads as 
follows: 

7 (Amended) A method for communications of a message 
cry^wgra^hically processed with an RSA public key encryption, 

providing' a* number e relatively prime to a lowest common multiplier of 

the k factors; 

TecrivS f %ipr:^xt ^al C Which is for.e. by encoains a 

receiving a „ord signal M to the ciphertext word signal C, 

whiie saTd IS^t' lssIge word signal M corresponds to a number 

representative of said message and 

^eS s'alk ciphertext word signal C corresponds to a number 
representative of an encoded form of said message through a 
relationship of the form 
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C= a. +ae-i M^-^ +. • • +ao (mod n) 
v =r,/^ a , ao are numbers; and 

where e and ae, ae-i, ' / ' ' ^^^d signal C at an intended 

deciphering the received chiphertext wora a y 
recipient with knowledge of the k factors. 

In essence, claim 7 has in common with claim 1 many of the important features that make 
this invention so advantageous, including the modulus n bHnr ^ prodnrt of the ^ prime factors , 
where ^ and where the k prime factors are random and distinct . In addition, as is the case m 
claim 1 . the ciphertext message (here ciphertext word signal) C. which is formed by encodmg the 
message (here digital message word signal) M, is rerHved without further modifications . The 
variation from claim 1 has to do with the mamier in which the ciphertext message C is formed. In 
claim 7, the ^^pV^^rt^vt n.e..a.e C ^--^^ ^ ^'"ction of M n e and coeficients a, .a,^. 

Yet another variation within the scope and spirit of the disclosed invention is provided m. 
claim 9 A clean version of claim 9 reads as follows: 

an terminal, and 

m being a composite number of the form 

Hi = Pi,i-Pi,2 • • 'Pi. It 
where 

P,'r ^.^'^^^ P" - d?l?inct rando. prl™e n^bers, 
ei is relatively prime to ^ 

ajTs''sel"e=tl^-'£r'cm-the-gS,;i;'iin:isting of the class of numbers 
equivalent 

to a multiplicative inverse of .m n • 

ei (mod(lcm((pi,i -1), {Pi,2 ."D ^P^'" ^' ^ ^ ' ' 

said first terminal including . 

means for encoding a digital message word signal M .to be 
transmitted from said first terminal (x=l) to said 
second terminal (i=2) , said encoding means 
transforming said digital message word ^^f^^^^ J 
signed message word signal M using a relationship of 

the form 

M„ =Af,'''(mod7i,) ; and 
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means for transmitting said signed message word signal M xs from said 
first terminal to said second terminal, wherein said second 
terminal includes 

means for decoding said signed message word signal M le to said digital 
message word signal Mi. 

As in the case of claim 7, claim 9 has in common with claim 1 important features of the 
invention, including the modulus n heing a nroduct of the k prime factors, where m and where 
the k prime factors are rnndnm and distinct . Additionally in common with claim 1 , the ciphertext 
message (here signed message word signal) Mu, which is formed by encoding the plaintext 
message (here digital message word signal) M,, is received without farther modifications . The 
variation firom claim 1 has to do with the manner in which the ciphertext message Mu is formed. 
In claim 9, the ^nrnded message M u is in fact a digital signature formed as a fanction of M, and 
the private kev of the se nder (d.n\ 

Although additional features and variations of the invention exist, the foregoing provides 
a constructive explanation of the invention. In view of this explanation, one would find it easier 
to understand why the claimed invention, as recited in claims 1-7 and 9-61, is novel and non- 
obvious. The patentable differences between the claimed invention and the cited references will 
be fiarther addressed below with regards to the claim rejections. 

XV. Claim Rejections Under 3 5 U.S.C. SI 02 

A. Summary of Claim Rejections 

In Sections 31-69 of the Office Action, where it is stated that the claims (1-61) are 
rejected under 35 U.S.C. §102, the Examiner cites, respectivley, Rivest et al (U.S. Patent 
4,405,829. hereafter "Rivest"), Vanston and Zuccheranto, ''Using four-prime RSA in which some 
bits are Specified," Electronic Letters. Vol. 30. No. 35, 1994 (hereafter "Vanstone"). Captain 
Nemo. "RSA Moduli should have 3 Prime Factors;' Scientific Bulgarian, August 1996. 
(hereafter "Nemo"), Slavin (U.S. Patent 5.974.151) and Itakura et al. "A Public-key 
Cryptosystem Suitable for Digital Multisignaturer Nipon Electronic Co.. Ltd., R&D No. 71, 
October 1983, IPSJ Journal Vol. 24, No. 4, May 2001 (hereafter "Itakura"). Rivest, Vanstone 
and Itakura have been relied on for rejecting the claims under 35 U.S.C. §102(b). Nemo and 
Slavin have been relied on for rejecting the claims under 35 U.S.C. §1 02(e). 
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1. Nemo Cannot be Relied on for Rejection under 35 U.S.C. §102(e) 

Nemo i. not a patent and therefore it cannot be relied on for rejecting the claims under 35 
U.S.C. §102(e). As set forth in 35 U.S.C. §102(e). only a patent granted to another from an 
application filed prior to Applicants' date of invention can preempt allowance of this Reissue 
Application. Such is not the case with Nemo. 

Since Nemo was published less than one (1) year prior to the filing date of the original 
patent (Dec. 9, 1996) it camiot be relied on for rejecting the claims under 35 U.S.C. §102(b) 
either. So, the only section remaining under which Nemo can be an alleged prior art is 35 U.S.C. 
§102(a). 

2. Nemo and Slavin are not necessarily prior art under 35 U.S.C. §102(a) 

Moreover, Nemo and Slavin may not qualify as prior art. regardless of what section of 35 
U.S.C. §102 is used, including 35 U.S.C. §102(a). The alleged priority dates of Nemo and Slavin 
are August 1996 and November 1996. respectively, pre-dating the filing date of the original 
patent (Dec. 9, 1996) by only four (4) and one (1) months, respectively. Hence. Applicants 
r..^e. the right to ^n.t..t tb.. u.e of .nd Slavin as prior art reference , including by 

antedating their invention relative to these references. 

B. The Claimed Invention is Patentably Distinguishable from the Cited 
References: the Cited References do not Teach, Enable or Suggest the 
Claimed Invention 

It is well estabUshed that for anticipation to be established two requirements must be met: 
1) the reference must teach each and every element of the invention; and 2) the reference must 
provide an enabling disclosure of the invention. Merely mentioning any aspect of the invention, 
without more, is insufficient to meet the anticipation requirements. 

To recap, in keeping with the purpose of the claimed invention as set forth in claims 1-7 
and 9-61, the modulus rt is a product of the k prime factors, where k>2 and where the k prime 
factors are random and distinct. Furthermore, as set forth in the claims, e.g., claim 2. d (the 
private key portion) is established as a fimction of the k prime numbers and e (the public key 
portion). As recited for example in claim 2. J is a multiplicative inverse of <mod(lcm(p, -1. P2 - 
1 . . . Pk-1))); and. again, the k {Jol) distinct random prime numbers pi, P2,... Pk from which the 
modulus n is provided/computed are also used for estabUshing d. 
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For Clarity, it is perhaps better to first point out how this is different from the teachings of 
each of the cited references. These differences can then be related back to the claims. 

Starting with Rivest, one of the references relied on by the Examiner, it is noted that 
Rivest is in fact incorporated by reference into the original patent. Rivest provides background 
information on the RSA public key encryption and sets the starting point for the claimed 
invention. No doubt, Rivest teaches and enables two-prime RSA public key encryption (n=p q). 
However, although i^wes^t discloses that alternative embodiments may use n which is a product 
of three or more primes, it specifically also states (and teaching away from the present invention) 
that .^^r-— -^ ""t^^d^^^^"^^ ^^'^ 29-31). In further contrast to the claimed 

invention, Rivest also n..Ve. no mention of the fact that such primes are distinct and random . 
The mere mention of three or more prime numbers without more does not rise to the level of 
enabling disclosure that would allow someone to practice the claimed invention without undue 
experimentation. (Needless to say, no one in the RSA universe has produced a product 
embodying the multi-prime RSA technology until the original patent came to light.) 

Although in col. 13, lines 29-34, Rivest mentions CRT (Chinese remainder theorem) and 
perhaps can be understood to suggest an approach using sub-tasks. Rivest does not mention 
performing such sub-tasks in parallel and indeed does not makes a claun of improved 
perfomiance as a result of using CRT (See: Section 50 of the Office Action). Moreover, Fig. 3. 
on which the Examiner relies (in Section 58), shows an encoding device (12) having registers 
(20, 22, 12, 24, 26 and 30), a multiplier selector (28) and a modulo n multiplier (32). As shown 
and described, neither the encodmg device nor any part thereof are an exponentiation device. 
Namely, Rivest does not teach or suggest one or more evponentiation devices . 

Vanstone, the next reference the Examiner relied on, is no more relevant than the 
foregoing reference. Vanstone introduces two concepts that address the need for added security 
with a stronger modulus. The first concept is using 4 prime factors in RSA which are selected 
from the same database as 2-prime RSA (See: Vanstone's Introduction and Using four-primes 
RSA). The second concept is selecting a set of primes that meet a non-random criteria. With 
these two concepts Vanstone teaches away from the present invention. Vanstone does not cover 
instances where the number of primes is K=3 and K>4, and it merely teaches the extension of 2 
prime factors to 4 prime factors for a greater modulus n. More importantly. Vanstone suggests 
using .i.^c.^.H.t.Wofr3rimes as was used in 2-prime RSA. Namely, randomly selecting a 
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number from an existing list or a database is not selecting a random number from the universe of 
prime numbers. What is more, the 4 nrime facto id of n are not random in that they are related in 
Vanstone through a relationship of the formp,=^f&ak (See: S.A. Vanstone et al. p. 2118). . 

Incidentally, Vanstone teaches a variant RS A. Vanstone suggests selecting a random e 
(See: Vanstone's Using four-primes RSA). As appreciated by the encryption community, this 
approach does not contribute to expedited cryptography. The opposite is true because a random 
e can be as large as /i and exponentiation with such e can be extremely slow. 

Nemo, another one of the cited references, discloses three-prime RSA (i.e., building n 
from three primes) and provides a processing time comparison between two-prime and three- 
prime RSA encryption methods. Ignoring for a moment the fact that Nemo may not qualify as a 
prior art. Nemo does not teach or suggest each and every element of the invention nor does it 
enable the invention as described above. Specifically, Nemo does not teach or suggest using at 
i...tfW nrime numbers p,.p^. from which the modulus n is provided/computed that are 
hnth distinct and random (See: Nemo's Section 4.3). Of course. Nemo fails also to address such 
features as the parallel processing of sub-tasks and the structural elements of the encryption 
system (e.g., with exponentiators for parallel processing). 

Nemo also does not enable practice of the invention, including the need to use the k 
distinct and random prime numbers for establishing J in the manner as described above. Merely 
stating that, as a minor benefit, n can be build from three primes and that the likelihood of a 
random 256-bit number being prime is greater than the likelihood of a random 384-bit number 
being prime is not sufficient to enable the present invention (See: Nemo Section 4.3). In order to 
both teach and enable the present invention all the elements as described above must be found in 
Nemo. But, as just pointed. Nemo's disclosure is deficient with regard to both criteria for 
anticipation. 

Slavin, the third reference the Examiner relied on for rejecting the claims, discloses a 
scheme for monitoring compUance of a public key encoding key using differential security levels 
(See: title, abstract, and claims 1-13 at col. 13-14). In fact, unlike the present invention as recited 
in claines 1-7 and 9-61, Slavin is not about multi-prime RSA. but rather is about using 
differential security levels (where unbalanced-RSA happens to be one possible encryption 
method). Slavin teaches awav from usin g multi-nrime in that it recommends against general use 
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ofmulti-Drime (coi: 7 lines 6-8 and 49-53). In stating that for a given n smaller primes result in 
less security Slavin fails to appreciate the value of multi-primes in RSA for general use. 

Slavin discloses, in col. 7 line 37, preferably "using four [4] randomly selected pnme 
numbers p„ qu Pa. qa, all of different values." However, when read in the context of Slavin's 
entire disclosure, including Slavin's claims, this assertion has a more limited meaning. For 
example in col. 3, lines 17-26, Slavin discloses using no more than 4 prunes unlike the present 
invention in which fc>2 can be also ^4. Besides, in col. 4, lines 8-13, Slavin discloses that all of 
the recipient public keys are generated using typically different prime factors that are 
H...w„e.i..tPdhv another user. In claim 6, Slavin recites "selecting a plurality of prime 

numbers" 1^^^ nfHUrrete or random. Namely. SI win does not consider the pnme 

..,^K..e K.^n. random ^r.A H^fT.re^t Tdiscrete^ a necessary element, or else Slavin would have 
recited them this way. In claims 1 and 1 1 . Slavin doesn't even address the plurality of primes. 
Furthermore, in col. 4. lines 38-60, Slavin discloses that, preferably the product of the pair of 
^^^i^ ^ .„K.....^.iiv l.rper than either one of the primes p,^ (lines 45-51); and that eu 

qj ^ are two lim ited-size factors (lines 38-43). 

As mentioned before, it is well settled that for anticipation the reference must teach each 
and every element of the claimed invention and must be enabling. As shown, the mere mention 

r..A.m differe^^ r^^^- '^^^^ ""^ rise to the level of enabling disclosure. Tlus assertion is 
supported in more than one way by Slavin's disclosure as outlines above. And. unlike the 
claimed invention wherein it is essential to have k random distinct prime numbers, the fact that 

..e^.t^... nn them, t---^^^ ^^^v from makinr this feati^re an essential element. As such. 
Slavin's disclosure is non enabling in that it does not avoid undue experimentation, considering 
the universe of prime numbers, in order to find that only discrete random primes can be 
employed to exercise the invention and produce the benefits associated with it. 

In addition, and no less important, is the fact that Sb>^n discloses encapsulating the 
....... n,.....e w^^^ r..^-^reA nublic Vnr f n . r} before it sent by the sender (See, e.g., 

col 7, line 58 to col. 8 line 9, col. 12, lines 9-13). Namely, after the message is encoded with the 
recipi^it's public key (n.e), but before it is sent by the sender it is encapsulated. Contrast this 
with the claimed invention according to which the sender does not modify the encoded message 
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(be is ciphertext or signed message; See, e.g., explanation of the invention in the previous 
Section XTV). 

Slavin also does not teach or suggest, and does not enable, creating the signed message as 
a function of the private key id,n) as recited in claim 9. As well, Slavin does not teach the 
coefficients or suggest the manner in which such coefficients are used in creating the ciphertext 
as recited in claim 7. Finally, although this is not an exhaustive comparison, from these examples 
one could easily understand that the claimed invention is patentably distinguishable from 
Slavin's teachings. Again, the analysis of Slavin is presented herein notwithstanding the fact that 
Applicants reserve their right to dispute the use of Slavin as prior art in the first place. 

Itakura, the next cited reference the Examiner relied on, discloses a scheme for 
accountable-group muUi-signatures as an extension of RSA public key encryption. Namely, 
Itakura discloses a signature system rather than an encryption system. As shown in Figs. 2 and 3, 
the conventional cryptographic key is signed by a verifier and fiirther signed by an approver in a 
scheme somewhat similar to a certificate authority approval. In any event, although in Fig. 1, 
Itakura shows a random number key generator it also states that of the three prime numbers it 
USPS two are large and one is small (See, e.g., abstract). Indeed, Itakura discloses that there are 
restrictions placed on the position numbers, ri, and shows how to apply such restrictions and find 
an o ptimal combination of kevs D.a.&r (See, page 5, Sections 3.2 & 3.3; e.g.," Therefore, r 
.honld be as small as possible '^. In every respect, Itakura does not disclose three more prime 
numbers that mu«t he. random and distinct . Contrast this with the present invention in which k 
random distinct prime numbers constitute an essential element. Moreover, the keys are 
numbers assigned in order of (organization) hierarchy and are public not private . 

In fiirther contrast to the claimed invention, Itakura modifies the encoded message (by the 
accountable-group signatures) before sending it. Although Itakura discloses generating a signed 
message using the private key d, it does not provide an enabling disclosure for creating a 
ciphertext using the public key e with multi-primes (*>2). Furthermore. Itakura does not teach 
using coefficients a^,. . . ao in creating the ciphertext message in the manner as recited for 
example in claim 7. As before, this is not an exhaustive comparison but it highlights the fact that 
the claimed invention is patentably distinguishable from Itakura. 

The other references which were cited but not relied on are deemed no more relevant than 
the foregoing references (Section 71 of the Office Action). Having said all that, and having 
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Shown how the invention is patentably distinguishable over the cited references, it is respectfully 
submitted that the cited references do not support the claim rejections because they do not teach, 
suggest or enable the claimed invention. 

Then, in further traversing the claim rejections, select comments made by the Examiner 
in Sections 32-69 of the Office Action are hereafter addressed. It is noted that in Sections 61-69, 
the T.^an.^..r H^d not treat .v.. m.in.. individuallv. but rather made comments relating to the 
specific references. Vanstone, Nemo,Slavin and Itakura, where each of these comments sweptat 

,,,ntire^otT-^-^-"--^-^^"d9-61. Wore, Applicants primarily rely on the 

explanation above which more specifically shows why the cited references neither teach nor 
suggest or enable the claimed invention as recited in claims 1-7 and 9-61. 

Secondarily, as to claim 1 the Examiner relies on Rivest and suggests that to apply CRT 
(Chinese Remainder Hieorem) the primes must be relatively primed in pairs, implying their 
distinctness (Section 33 of the Office Action). However, the Examiner imports this assertion into 
Rivest in order to attribute the distinct and random character of the primes to Rivest. As a matter 
of 102 rejection practice this is not allowed m order to provide for the deficiency in Rivest. 
Besides, the claimed invention is not restricted to CRT as a means for combining the results of 
the subtasks, when such subtasks are used. Further as to claim 1 , the discussion above illustrates 
how this claim distinguishes over the cited references (Sections, 61-69 of the office Action). 
Accordingly, it is respectfiiUy submitted that claim 1 is allowable over the cited references. 

Noting also the Examiner's comments as to claim 2, Rivest does not disclose nor enable 
establishing d as a fimction of n, e and the k random and distinct primes. Moreover, as claim 2 
includes all the elements of allowable claim 1 it is also allowable over the cited references 
(Sections 34 and 61-69 of the Office Action). 

As to claims 3-6 and 1 1-12, even if Rivest mentions terminal 1 and terminal 2 it does not 
meet all the elements of such claims (as outlined above with respect to claims 1 . 2. et seq.) The 
remaining references are deficient as well in view of the explanation above (Sections 35-38. 42- 

44 and 61-69 of the Office Action). 

As to claim 7, Rivest likewise fails to disclose or enable using the ^random and distinct 
primes. For the reasons as described above, this is true even if Rivest mentions the coefficients 
ac,. . . ao (Sections 39-40 and 61-69 of the Office Action). 
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As to claims 14-61, the foregoing arguments apply with equal force and effect (Sections 
45-69 of the Office Action). To recap some of the differences, as to claims 18 and 19, for 
example, Rivest does not disclose or enable establishing (i as a function ofn, e and the * random 
and distinct primes (Sections 48, 49). As to clarnis 20-23 and 50-55, solving the subtasks in 
accordance with the present invention is not limited to CRT alone and the invention is not 
claimed with such limitation (Sections 50, 59). This is true even if CRT can produce 
performance advantage when performed serially; and it is clear that performance of CRT is not 
inherently parallel as it can be serial as well. Moreover, the structural elements of the encryption 
system (as recited in claims 45 et seq) and the parallel processing of the sub-tasks is not found in 
the references (Sections 54-58). As to claims 24-33, Rivest does not disclose or enable the k 
random and distinct primes nor does it address the comparison between the respective 
computation cycles in two-prime and multi-prime encryption schemes (Sections 51, 52). As to 
claims 34-39, Rivest does not address or suggest using the k random and distinct primes and does 
not worry about backward compatibility (Section 53). And, as to claims 56-61, it would not be 
inherent in Rivest to generate the k random and distinct primes (Section 60). At the time of 
Rivest and Vanstone's papers, for example, there was no key development and there is no proof 
of that in either of them. In fact, they resorted to selecting the primes from a list or databases. 
The fact that the primes were pre-existing in the list, rather than developed, is an important 
distinction for the purpose of encryption security. Again, no matter how large the database is, 
selection fi-om a subset of numbers is not synonymous with selection of a random number. 
Selection of ^ random numbers is characterized in that each of the numbers is equally likely to be 
selected. 

Accordingly, Applicants respectfully submit that claims 1-7 and 9-61 are allowable over 
the cited references. Reconsideration and withdrawal of the claim rejections under 35 USC 102 
are hereby respectfully solicited. 

XVI. Double Patenting Reiection Over Co- ppnding Application 

The Examiner provisionally rejected claims 9, 11, 12, 35 and 50-55 over claims in co- 
pending Application by the same inventors (09/328,726). The claims as now presented in this 
Reissue Application are distinguishable from claims 14-62 in the co-pending Application. 
Accordingly, Applicants believe that a Terminal Disclaimer is not warranted at this time. 
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Applicants respectfully request that this rejection be reconsidered and withdrawn or at the very 
least be withheld until issue of one of the AppUcations as a patent 



YVTT. Conclusion 



A. Summary 

Applicants appreciate the Examiner's review of this Reissue Application and respectMly 
reque^ r^nsideration and allowance of the pending clain« 1-7 and Ml as now presented in 
view of the foregoing amendments and rematks. AppHcants believe that all the objections and 
rejections have been overcome and that the Reissue Application is in condition for allowance. 

B Interview Requested 

If any issues remain unresolved, the Examiner is kindly requested to contact the 
undersigned Applicants' attorney. Applicants appreciate the opportunity to discuss such issues 
with the Examiner in order to expedite the examination of this Reissue Application. 

C. Fee Authorization: 

If for any reason an insufficient fee has been paid, the Commissioner is hereby authorized 
to charge any deficiency in payment of required fees associated with this communication to 
Deposit Account 02-3964. 



Date: September 9, 2002 

Oppenheimer Wolff & Donnelly LLP 
Customer No. 25696 
1400 Page Mill Road, 
Palo Alto, CA 94304 
Tel: (650) 320-4000 



RespectfiiUy submitted, 
Leah Sherry, 

Attorney for Applicant, Reg. No. 43,918 



Commissioner for Patents, Washington, D.C 20231, on 



date: ^ ju 



2002 
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24. (NewV Amended't The method according to claim 30;2L 

wherein p and g are a pair of prime numbers the product of which equals n,-mA 

wherein the deciphering the number C to derive the number M is divided into subtasks, one 

subtask for each of the k distinct random prime numbers, 
wherein the k distinct random prime numbers are each smaller than p and 
whereby for a given length of n it takes fewer computational cycles to find and ch e ck th e K 

dir.tinnt rnndnm primo mimhorn that it talc o G to find and chock n erform the deciphering 

relative to the number of computational cycles for performi ng such deciphering if the pair 

of prime numbers p and q were used instead . 

25. (NevA -Amended) The method according to claim 22, 

wherein p and g are a pair of prime numbers the product of which equals 7i,-aftd 

wherein the deciphering the number C to derive the number M is divided into subtasks, one 

subtask for each of the k distinct random prime numbers, 
wherein the k distinct random prime numbers are each smaller than p and q^ 
whereby for a given length of n it takes fewer computational cycles to find and check the K 
diRtinct random prime numhGrr . that it takes to find and chec kp erform the deciphering relative to 
the number of computational cvcles for performing su ch deciphering if the pair of prime 
numbers p and a were used instead . 

26. fNew VAmendedt T he method according to claim 34r2Qj 

wherein th ep and a are a pair of prime numbers the product of which eouals n. and 

wherein developing the at least three distinct random prime numbers and computing steps can 

hen is performed, including for n that is more than 600 digits long-faster, in less time than 

horotoforo ponniblQ with onl\ d t takes to develop the pair of prime numbers p and q and compute 

thatn . 



27. (New VAmended) The method according to claim 

wherein tb ep and C7 are a pair of prime numbers the product of which equals n. and 
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wherein developing r the at least three distinct random prime numbers and computing and 
e ncoding st e ps can h en is performed , including for n that is more than 600 digits long-fester> in 
less time than her e tofor e possible wnth onl v it takes to develop the pair of prime numbers p and q 
and compute that n . 

28. fNew VAmended) The method according to claim 14, 

wherein p and ^ are a pair of prime numbers the product of which equals riy-mA 

wherein the deciphering step is divided into sub-steps, one sub-step for each of the k distinct 

random prime numbers. 
wherein the k distinct random prime numbers are each smaller than p and ^, 
whereby for a given length of n it takes fewer computational cycles to find and ch e ck the K 
distinct random prime numbers that it takes to find and ch e c k nerform the deciphering stq i 
relative to the number of computational cycles for performing such deciphering step if the pair of 
prime numbers p and q were used instead . 

29. (New VAmendedl T he method according to claim S8 rl4> 

wherein tb ez? and a are a pair of prime numbers the product of which equals and 
wherein developing the k distinct random prime numbers and computing st e ps can bc the 
composite number n are performe d, including for n that is more than 600 digits long-4aster. in 
less time than h e retofore possible with onl v it takes to develop the pair of prime numbers p and q 
and compute that n . 

30. fNew VAmended) The method according to claim 16, 

wherein p and ^ are a pair of prime numbers the product of which equals n,-ffid 

wherein the decoding step is divided into sub-steps, one sub-step for each of the k distinct 

random prime numbers^ 
wherein the k distinct random prime nvunbers are each smaller than p and q, 
whereby for a given length of n it takes fewer computational cycles to find and chock the K 
distinct random prim e numbers that it takes to find and ch e ck perform the decoding step relative 
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to the number of computational cycles for perfoiroing such decoding step if the pair of prime 
numbers p and a were used instead . 

3 1 . (NewV Amended) The method according to claim ^0:-16, 

wherein fe ep and q are a pair of prime numbers the product of which equals n. and 
wherein developing the k distinct random prime numbers and computing steps can bc ^ 
composite n is performed ^ including for n that is more than 600 digits long-fest ^. in less time 
than h e r e tofor e pofisibl e with onl v it takes to develop the pair of prime nimibers p and a and 
compute that /i . 

32. (New VAmendedl The method according to claim 18, 

wherein p and ^ are a pair of prime numbers the product of which equals /i,-and 

wherein the encoding step is divided into sub-steps, one sub-step for each of the k distinct 

random prime numbers. 
wherein the k distinct random prime numbers are each smaller than p and 9, 
whereby for a given length of n it takes fewer computational cycles to find and ch e ck the K 
distinct random prim e numb e rs that it talc e s to find and ch e c k perform the encoding step relative 
to the number of computational cvcles for performing such encoding step if the pair of prime 
numbers p and q were used instead . 

33. (NewV Amended't T he method according to claim ^IS^ 

wherein th en and ^ are a pair of prime numbers the prod uct of which equals n. and 
wherein developing the k distinct random prime numbers and computing steps can bc^ 
composite number n is performed , including for n that is more than 600 digits long-fest ^. in less 
time than h e r e tofor e poRsibl e with onl v it takes to develop the pair of prime numbers p and q and 
compute that w . 

34. (Ne wAmended^ The method according to claim 14, wherein a message crvptograp hically 
processed in accordanc e with h^^ the method is compatibl esender with two-prime RSA public key 
crvptograph v encrvption characterized by n being equal to a composite number computed as the 
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product of 2 prime numbers d and a. is decipherable with multi-prime (k>2\ RSA public key 
encryption characterized bv the composite number n being computed as the product of the k 
distinct random prime n umbers, po p^. 

35. (Ne wAmended'i The method according to claim 44^2^ wherein athe signed messag e word 
signal Mic. formed from the digital message word signal M; being crvpto^aphicallY processed m 
accordance at the first terminal with th e metliod multi-prime (k>2) RSA public key encryption 
which is compatiblo characterized bv the composite number n being computed as the product of 
the k distinct random p rime numbers, v^ . p ?- ■ ■ ■ ok. is decipherable at the second terminal with 
two-prime RSA public key crvptograph v encryption characterized bv n being equal to a 
composite number computed as the product of 2 prime numbers v and q . 

36. fNe wAmended't The method according to claim 16, wherein a message crvp to graphically 
processed in accordanc e witli bv the m e thod is comnatible sender with two-prime RSA public key 
cr\T>to graph vencrvption characte ri zed bv n being equal to a composite number computed as the 
product of 2 prime n umbers n and o. is decipherable bv the decoding with multi-prime (k>2) 
RSA public key encryption characterized bv the composite number n being computed as the 
product of the k distinct random prime numbers. d\ . p^- ■ • - pv- 

37. (New Amended) The method according to claim 18, wherein ethe signed messag e Afc, 
formed from the plaintext message data M being crypto graphically processed in accordanc o at the 
sender with tho motliodmulti-prime (k>2^ R S A public key encr y ption which is 
compatibl o characterized bv the c o mposite number n being computed as the product of the k 
distinct random prime numbers, pi. . • . pk , is decipher able bv the decoding at the recip ient 
with two-prime RSA public key crvptograph v encryption characterized bv n being equal to a 
composite number computed as the product of 2 prime numbers v and a . ^ 

38. (New Amended) The method according to claim 20, wherein a message 
^at acrvptographicallv processed in accordanc e with ^ the m e thod is compatibl e sender with two- 
prime RSA public key crvptograph v encryption characterized bv n being equal to a composite 
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number computed as the product of 2 prime numbers v and a. is decipherable at the recipient 
with multi-prime RSA public key encryption characterized bv the composite number n faein^ 
computed as the product of the at least three distinct random prime numbers , 

39. rNe wAmended't The method according to claim 22, wherein a message 
dat acryptoeraphicallv processed in accordance withb ;^ the method is compatibl o sender with two- 
prime RSA public key crypto graph v encryption characterized by n being eoual to a composite 
number computed as the product of 2 prime n umbers v and a. is decipherable at the recipient 
with multi-prime RSA pubUc key encryption characterized by the composite number n being 
computed as the product of the at least three distinct random prime numbers . 

40. (Ne wAmended't A cryptography method for local storage of data by a private key owner, 
comprising the steps of: 

selecting a public key portion e; 

developing k distinct random prime numbers, pupiy - > * A» where k^3y and checking that each 
of the k distinct random prime nxmibers minus 1, pi-l, /72-I, • • . Pk-1, is relatively prime 
to the public key portion e; 

establishing a private key portion J by a relationship to the public key portion e in the form of 



computing a composite number, n, as a product of the k distinct random prime numbers that are 
factors of n, where only the private key owner knows the factors of w; 

encoding plaintext data Af to ciphertext data C for the local storage, using a relationship of the 
form C=M^ (mod w), where Q<M <h-l ^L whereby the ciphertext data C is decipherable 
only by the private key owner having available to it the factors of 71. 

41. (N e w) The cryptography method in accordance with claim 40, further comprising the 
step of: 

decoding the ciphertext data C from the local storage to the plaintext data Musing a relationship 
of the form A/= C*^ (mod n). 
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42. (New Amended') A cryptographic communications system, comprising: 

a pliirality of stations; 

a communications medium; and 

a host system adapted to conduct encrypted communications communicate with the plurality of 
stations via the communications mediu m sending a receivine messages crvptographically 
processed with an RS A public key encryption , the host system including 

at least one cryptosystem responsiv e to e ncryption and/or decryption r e qu e sts from the 
host sy s t e m, th e cryptosystem being configured for 
developing k distinct random prime numbers, pupi^ * * -Pkj where k^3y 
checking that each of the k distinct random prime numbers minus l,/7i-l,/72-l, . • . 

is relatively prime to a public key portion e that is associated with the 
host system, ^ 

computing a composite number, n, as a product of the k distinct random prime 
numbers, 

establishing a private key portion J bv a re lationship to the pubhc key portion e 

in the form of d = g"Vmod((p, -l)-(/>2 -^)"'iPk "!)))* 
in response to an encoding reques t from the host system, encoding a plaintext 
message data M producing therefrom a ciphertext message data C to be 
conmiunicated via the host system, the encoding using a relationship of 
the forai C= (mod /i), where 0<M ^-1 , 

— ostablishing a privat e key portion by a relationship to th e pubUo k e y portion c 

in th e form of ; and 

in response to a decoding request from the host system, decoding a ciphertext 
message data C cbnununicated via the host producing therefrom a 
plaintext message data Af using a relationship of the form Af s C ^ (mod 
w) , whore C and M can b e r e sp e ctiv e ly C and M . 

43. (New Amended) A system for proc e ssing — a — messag e — used — in — cryptographic 

communications of a message cvptographicallv processed with RSA public kev encryption . 

comprising: 

a bus; and 
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a cryptosystem op e rativ e l v communicativelv coupled to and receiving from the bus 



developing k distinct random prime numbers, pupiy - * - Pk, where k^3, 

checking that each of the k distinct random prime numbers minus l,/?rl,p2-l, • . . 

is relatively prime to the public key portion e, 
computing a composite number, /i, as a product of the k distinct random prime numbers, 

e ncoding a plaintext form of a first m e Gsage M to produc e a ciph e rtext form of the first 

m e ssag e C using a relationGhip of th e fomi C" Af^ (mod /i), wh e r e 0<M <n 1, 
establishing a private key portion by a relationship to the public key portion e in the 

fomi ofd^ e'\mod({p, -l)'(p, -1))), 

in response to an encoding request from the bus, encoding a plaintext form of a first 
message M to produce C a ciphertext form of the first message^ using a 
relationship of the form C= (mod n\ where 0<M<w-l. and 

. in response to an decodin g request from the host svstem. decoding C\ a ciphertext form 
of a second message-^^^ to produce 4h eAf \ a plaintext form of the second message 
M^^ using a relationship of the form M= C ^ (mod w), the first and second 
messages em-be being distinct or one and the same. 

44. (N e w) The system of claim 42, wherein the at least one cryptosystem includes 

a plurality of exponentiators configured to operate in parallel in developing respective 
subtask values corresponding to the message. 

45. (New Amended't The system of claim 42, wherein the at least one cryptosystem includes 

a processor, 

a data-address bus, 

a memor y op e rativcly coupled to the processor via the data-address bus, 

a data encryption standard (DES) xmit op e rativ e ly coupled the memory and the processor 




and 




requests, the cryptosystem being 



ea^abl econfigured effor 



providing a public key portion e, 



via the data-address bus. 
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a plurality of exponentiator elements- operativ e ly coupled to the processor via the DES 
unit, the plurality of exponentiator elements being configured to operate in 
parallel in developing respective subtask values corresponding to the message. 

46. (New Amended) The system of claim 45, wherein the memory and each of the plurality of 
exponentiator elements has its own DES unit that Gncrvpts crvptographicallv processes message 
data received/returned firom/to the processor. 

47. (Ne wAmended^i The system of claim 45, wherein the memory is partitioned into address 
spaces addressable by the processor^ including secure, insecure and exponentiator elements 
address spaces, and wherein the DES unit that is coupl e d to th e proc e ssor is configured to 
recognize the secure and exponentiator elements address spaces and to automatically 
eeervBt encode message data therefi-om before it is provided to the exponentiator elements, the 
DES unit being bypassed when the processor is accessing the insecure memory address spaces, 
the DES unit being fiirther configured to deeFyptdggodg encrvpt e d encoded message data 
received fi-om the memory before it is provided to the processor. 

48. (New) The system of claim 45, wherein the at least one cryptosystem meets FIPS 
(Federal Information Processing Standard) 140-1 level 3, 

49. (New) The system of claim 45, wherein the processor maintains m the memory the 
public key portion e and the composite number n with its factors puP2, • • - A- 

50. (New Amended) A system for proc e ssing — a — m e ssag e — «sed — in — cryptographic 
communications of a message crvotogranhicallv processed with RSA public kev encrvp tion. 
comprising: 

a bus; and 

a cryptosystem receiving fi-om the system via the b\is e ncrvpti on encodin g and 
decrvption decoding requests, the cryptosystem including 
a plurahty of exponentiator elements configured to develop subtask values, 

Reissue 09/694.416 _,24 Document #267082 

S V/202975.0) 
01052001/16:57/20206.14 

rnllinsetal. 



Attorn e y Docket No.: 20206 - 125 
OLD VER. 



a memory, and 

a processor configured for 

receiving the e ncrvption encoding and d e crvption decoding requests, each 
encrvption encoding request providing a plaintext message M to be 
encr\pted encoded ,- oach encryption requ e st can additionally pro\dd e 
obtaining a public key that includes an exponent e and a modulus a 
representation ofathe modulus n existing in the memory in the form of its 
k distinct random prime number factors pup2y . . . Pk, where k > 3, or th e 
processor can obtain th e public k e y fi-om th e m e mory, 
constructing subtasks , one subtask for each of the k factors, to be executed by the 
exponentiator elements for producing respective ones of the subtask 
values, Ci, C2, . . . Ck, and 
forming a ciphertext message C from the subtask values Ci, C^, . . . C^r^ 
wherein the ciohertext message C is decit>herable using a private key that includes 
the modulus n and an exponent d which is a function of g. 

51. (New Amended^ The system of claim 50 wherein each one of the subtasks Ct, C2, . . . Ck is 
developed using a relationship of the form C; = M,.^'(modp,.), where s M(mod/7,.), and 
e,. = e(mod - 1) , and w here i=l, 2, . . . 

52. (New Amended'i A system for proc e ssing — a moDsag e us e d — in — cryptographic 
communications of a message crvptographicallv processed with RSA pub lic key encryption, 
comprising: 

a bus; and 

a cryptosystem receiving firom the system via the bus encrvptio n encoding and 
decr\T > tio n decoding requests, the cryptosystem including 
a plurality of exponentiator elements configured to develop subtask values, 
a memory, and 
a processor configured for 
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receiving the e ncryption encoding and dQcrvptiondecoding requests, each 
o ncrvT^tion encoding / decryptioH decoding request providingprovided with a 
plaintext/ciphertext message M/C to be 

cncrypt e d encoded / decrvpt e d decoded and can additionally provide^ ^^ 
without a pubhc/private key that includes an exponent e/d and a modulus n 
^^representation of a modulus w which e x ists in the memory in the form of 
its k distinct random prime number factors /?2, • • • Pk? where k k 
the procosGor can obtain 

obtaining the public/private key fro m the memory, the memory if the 
encoding/decoding request is nroyided wit hout the public/private key^ 

constructing subtasks to be executed by the exponentiator elements for producing 

respective ones of the subtask values, Afi, A/2, . . . Mk,/Ci, C2, . . • Ck, and 
forming the ciphertext/plaintext message CIM from the subtask values Cy, C2, . . . 
Ck/M;, Mi, . . . Mk, 

53, (New Amended) The system of claim 52 wherein when produced each one of the subtasks 
Ci, C2, . . . Ck is developed using a relationship of the form Q s A/^*'(mod/7^), where 
C,. =C(mod and se(modp,. -1) ,^iwhere i=l, 2, ... A:. 

54, (New Amended) The system of claim 52 wherein when produced each one of the subtasks 
Ml, M2, . . . Mk is developed using a relationship of the formM,. s c/'(mod;7^), where 
M. sM(mod and J. = J(mod/?,. -l),jniwhere i=l, 2, ...k. 

55. (Now) The system of claim 54, wherein the private key exponent d relates to the public 

key exponent eviz d^e'^ (modCCp, - 1) • (/?2 - 1) ' ' " CPjt " 1))) • 

56. (Ne wAmended) A system for procoGGing — a — moGoago us e d — m — cryptographic 
rnmmnniratinn R of a message crvpto graphically procey ^sed with RSA public key encryption, 
comprising: 
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means for selecting a public key portion e; 

means for developing k distinct random prime numbers, p\,pi,... p\^, where ^ :> 5, and for 
checking that each of the k distinct random prime nxmibers minus 1, px-l, pi-l, . . . 
is relatively prime to the public key portion e; 

means for establishing a private key portion d hya relationship to the public key portion e in the 

form ofd^ e'' (mod((p, - 1) • (^2 - 1) • • • {Pk - 1))) ; 
means for computing a composite number, n, as a product of the k distinct random prime 
numbers; 

means for obtainin g receiving a ciphertext message data C; and 

means for decoding the ciphertext message data C to a plaintext message data M using a 
relationship of the form M= (mod ri), 

57. (N e w) The system according to claim 56, further comprising: 

means for encoding the plaintext message data M to the ciphertext message data C, using a 
relationship of the form C= M (mod /i), where 0<M<nA. 

58. Q4ew (Amended^ A system for processing a moDsago uood in cr>T > tographic 
communications of a mess a ge crvptop ra phicallv processed with RSA public kev encryption, 
comprising: 

means for selecting a public key portion 

means for developing k distinct random prime numbers, pu Piy ^ * - Pk, where ^ ^ 5, and for 
checking that each of the k distinct random prime numbers minus l,/?rUp2-U • • • 
is relatively prime to the public key portion e; 

means for establishing a private key portion by a relationship to the public key portion e of the 

form d = e'\mod(ip, - 1) • (/?2 - 1) * ' ' (/^* " 1))) ' 
means for computing a composite number, n, as a product of the k distinct random prime 
numbers : and 
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means for encoding a plaintext message data M with the private key portion d to produce a 
signed message Ms using a relationship of the form Ms= (mod w), where 0<M ^^l^ 
the sig;ned message Mc^being decipherable using the public key portion e. 

59. Otew Amended'l The system of claim 58 fiulher comprising the step of: 

means for decoding the signed message Ms with the pri¥ate pubhc key portion e to produce the 
plaintext message data M using a relationship of the form M= Ms^ (mod w). 

60. (Ne wAmendedl The system of claim 57, wherein the system can conduct encr>ytod 
commnnicationrj with other public k e v crypto graph v communicate the crvptograDhically 
processed message to another system that encrvpt encodes /d e cryp t decodes dat a with RSA p ublic 
kev encryption using a modulus value equal to n independent of the k distinct prime nxmibers. 

61. Ofew ^Amended) The system of claim 59, wherein the system can conduct oncr>'ptod 
cnTnTnnm'catinTiGcommunicate the crvptogr a phicallv processed message to another sy stem that 
encodes/decodes data with eth^RSA public key cryptography syst e ms that enor>pt/dccrypt 
data encrvption using a modulus value equal to w independent of the k distinct prime numbers. 
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File Compare Results to Show Changes to the Claims Since the Preliminary Amendment 
Clean version of the Claims 

Clean version of the claims with all of the changes to be made vis-a-vis the U.S. Patent 
5 ,848 J 59, as follows: 

1. (Twice A mended^ A method of proccGsing a moGsage for ugo in cr>ptographic 
communications of a message crypto gr aphically processed with RSA (Rivest Shamir & 
Adleman^ public key encryption^ comprising the steps of: 

developing k distinct ra ndom prime numbei-s Pj. P7r - ■ ■ Pt' >^here k is an integer greater than 2: 
providing a number e re lativelv prime to (p^ -1 Vfa; -1 V. . .-(pv-n: 




providing a composite number^ n^-as-a equaling the product-ef prp2- -p k whcro k Ig an intogor 

gr e at e r than 2, and p4 .7par^-=-^ k are distinot random prime numbers; and; 
receiving a cinhertext word signal C which is formed bv encoding a plaintext message word 

signal M to a ciphertext word signal C, where M corresponds to a number representative 

of the message and 

0<Af<«-l, 

where C is a number representative of an encoded form of the plaintext message word 
signal M such that 

C= (mod n), and where e is associated with an inten ded recipient of the cinhertext 
word signal C: and 

wher e e is a numb e r relativ e ly prim e to (p . ^ 1 ) (p^ 1) ' . . ■ (pfe -^)^ 

deciphering the received cinhertext word signal C at the intended rec ipient having available to it 
the k distinct ran dom prime numbers Pi . p^ Pv, 

2. (Twice Amended) The method according to claim 1, compriGing^ gmB the 
fifffee fdeciphering step e feincludes 

establishing a number, d, as a multiplicative inverse of 
e(mod(lcm((pi -1), (pz -1), . . - , (pk -l))))t4 and 
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decoding the ciphertext word signal C to the plaintext message word signal M where 
M= C' (mod n). 

3. (Twice Amended'fc A method for communications of proc e ssing a message signal Mi 
tts ecrvDtograDhicallv processed with RSA public kev encryption in a communications system 
having j terminals, each terminal being characterized by an encoding key Ei =(ei, nO and j 
decoding key Di =(di, nO, where i=l, 2, . . . , j, and the message signal Mi 
corr e spondin g corresponds to a number representative of a message-to-be transmitted received 
from the terminal, the method comprising the steps of: 
computin e establishing ni where ni is a composite number of the form 

where k is an integer greater than 2, 

Pi.u Pi^y . - . , Pi^ are distinct random prime numbers, 

ei is relatively prime to lcm(pi,i -l,...pi,k -1), and 

dj is selected from the group consisting of the class of numbers equivalent to a 
multiplicative inverse of 

ei (mod(lcm((pi,i -1), (pia -1). • • • , (Pi^ -1)))); 
receiving bv a recipient terminal ( i= from a sender terminal fi = jc. x^v ^ a ciphertext 

signal Cv formed bv encoding a digital message word signal Mj . for transmission from a 
first t e iminal (i-1) to a s e cond tcmiinal (i~2) Mx» said e ncoding step includin g wherein the 
sub stop of: encoding includes 

transforming said message word signal M^Mx to one or more message block word signals 



MiMx"> each block word signal MiM^" corresponding to a number representative 
of a portion of said message word signal M^M^ in the range 0< MaM^" ^ - 1 
L and 



transforming each of said message block word signals M4Mx" to a ciphertext word signal 



€+Cx that corresponds to a number representative of an encoded fomi of said 
message block word signal M^Mx" where 
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decinhering the received ciphertext word signal P. , at the recipient terminal having available to it 
the k distinct random nrime numbers Py ^, p.^?^ for establishing its dy. 

4. (Twice Amended') A rryptnrrnphic svstem for commimications systemof a xnessase 
crv ptographir-allv processed with an R SA nublic kev encrvntion. comprising: 
a communication channel adapted for transmitting a ciphertext word signal C that relates to a 
transmit moosogo word signal M ; 

encoding means coupled to said channel, and adapted for transforming tbei transmit message 
word signal M to the ciphertext word signal C using a composite number, n, where n is a 
product of the form 
n=pip2- -Pk 

k is an integer greater than 2, and 

Pi. P2> • . • Pk are distinct random prime numbers, 

where the transmit message word signal M corresponds to a number representative of 

a the message and 

0<M<n-l 

where the ciphertext word signal C corresponds to a number representative of an 
encoded form of said message through a relationship of the fon n[and corrcoponds to] 
C= M' (mod u), and 

where e is a number relatively prime to lcm(pl -1 , p2 -1 , . . . , pk -1 ); and 
decoding means coupled to said channel and adapted for receiving the ciphertext word signal C 
from said channel ar. H ^ having available to it the k distinct random prime numbers Pk p->. 
. . . Pv. for transforming the ciphertext word signal C to a receive message word signal M' 
where M' corresponds to a number representative of a decoded form of the ciphertext 
word signal C through a relationship of the form 
M'=C''(mod/i) 

where d is selected from the group consisting of a class of numbers equivalent to a 
multiplicative inverse of 
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e(mod(lcm((pi -1), {pi -1), , . . , (pk -1)))). 

5. (Twice Amended! A crvpto eraphi c s vstem for communications of a message 
cr yptograDhicallv processed with an RSA public kev encryption, the system having a plurality of 
terminals coupled by a commxmications channel, comprising: 

a furst terminal of the plurality of terminals characterized by an encoding key 

Ea K^a, Ha) and a decoding key Da =(dA, ha), 

where ua is a composite number of the form 

nA =PAJ'Pa,2 . ■ 'PA,k 

where 

k is an integer greater than 2, 

PA,i5 pA^, • • • 5 PA,k are distinct random prime numbers, 

Ca is relatively prime to 

\cm(pA,j -1, Paj -1, . . . , PA.k -1), and 

dA is selected from the group consisting of the class of numbers equivalent to a 
multiplicative inverse of 

eA (mod(lcm((pA.i -1), (Pa^ -1), • • - , (Pam -1)))); and 
a second terminal of the plurality of terminals having 



said communications channel from said second terminal to said first terminal, 
te into one or more transmit message word signals Mb, where each Mb 
corresponds to a number representative of said ^^message in the range 
0<MB<nA'l, 

encoding means coupled to said channel and adapted for transforming each 
transmit message word signal Mb to a ciphertext word signal Cb that 
corresponds to a number representative of an encoded form of said first m e ssage 
teette hmessagethrough a relationship of the form 



blocking means for transforming a first message, which is to be transmitted on 




(modw^). 
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decoding means coupled to said channel and adapted for receiving each of said 



k distinct random prim e numbers p^^i^ . . ■ ^ Pav. for transforming each of 
said ciphertext word signals Cb to a receive message word signal M b, and 
means for transforming said receive message word signal M'b to said first 



6. (Twice Amended) The system according to claim 5 wherein said second terminal is 
characterized by an encoding key Eb =(®b, hb) and a decoding key Db K^b, hb), where nB is a 
composite nxmiber of the form 

~PbxPbx • • ' Pbm 
where k is an integer greater than 2, 
Pb.i, Pb^, • • • Pbac are distinct random prime numbers, 
Cb is relatively prime to 
lcm(p5.i-l,/?fl,2-l, . • 'PBr^\ and 

dB is selected from the group consisting of a class of numbers equivalent to a 
multipUcative inverse of 

(mod(lcm((pB.i-l), (Pw - • ^ ^B.k -1)))), 
said first terminal fiirther having 



blocking means for transforaiing a second messape.[-to-be-transmitted1 which is 
to be transmitted on said communications channel from said first terminal to 
said second terminal, to one or more transmit message word signals Ma, where 
each Ma corresponds to a number representative of said message in the range 
0<MA<nB-\ 

encoding means coupled to said channel and adapted for transforming each 
transmit message word signal Ma to a ciphertext word signal Ca and for 
transmitting Ca on said channel, where Ca corresponds to a nimiber 



ciphertext word 



signals Cb from said channel and, having available to it the 



message, where Mb corresponds to a number representative of a decoded 

form of Cb through a relationship of the form 

M*B^C/^(modn^). 
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representative of an encoded form of said second message through a relationship 
of the form 

said second terminal further having 

decoding means coupled to said channel and adapted for receiving each of said 
ciphertext word signals Ca from said channel an d, having available to it the 
k distinct random prime numbers p gj, pp,?, ■ ■ . Prv. for transforming each of said 
ciphertext word signals to a receive message word signal M a, and means 
for transforming said receive message word signals Ma to said^jgggnd message, 
where M a corresponds to a number representative of a decoded form of Ca 
through a relationship of the form 

7. (Amended) A method of proccsGing a mGosag e for ugo in cr)^tographio communications^^la 
message crvptogranhicallv processed with an RSA pu blic kev encrvption, comprising the steps 
of: 

developing k factors of a composite number^ n, as a product of at least 3 whol e numb e r factors 
fflcater than on e , the^ factors being distinct random prime numbersf and k is an integer 
larger than two (k>2): 

providing a number e relatively prime to a lowest com mon multiplier of the k factors: 

providing the composite number n: 

receiving a ciphertext word si^al C which is formed bv encoding a digital message word signal 
M to ciphertext , word signal C, where said digital message word signal M 
corresponds to a nimiber representative ef^femd message and 
0<Af<w-l, 

where said ciphertext word signal C corresponds to a number representative of an 
encoded form of said message through a relationship of the form 
Cs ae -^aeA M""^ +. . . +flo (mod n) 
where e and a^ ae-i, . . . , ao are nxmibersr-i^^^ 

Reissue 09/694.416 6 Docxunent #267082 

S V/20207S.01 
01052001/16:57/50206.1 4 

Coliins et al. 





Attorn e y Docket No.: 20206 125 
OLD WR. 



deciphering the received chiohertext word signal C at an intended recipient with knowledg e of 
the k factors. 

8> (Amended) A m e thod according to claim 7 wher e in said e ncoding st e p furth e r includ e s tho 
st e p of 

transfomiing said digital m e ssag e word signal M to said cipert e xt word signal C by tho 

performance of a first order e d succ e ssion of inveritble op e rations on M, and 

wherein the method further comprises th e st e p of: 

decoding said cip e rt e xt word signal C to said digital m e ssag e word signal M by th e perfomianco 
of a second ordered succession of invortiblo operations on C, wh e re each of the invortiblo 
operations of said second ord e red succession is the invers e of a corresponding one of said 
first ordered succession, and wher e the order of said invertibl e op e rations in said second 
ordered succession is r e v e rs e d with r e spect to the ord e r of corresponding invortiblo 
operations in said first ord e r e d succession. 



signals crypto granhicallv processed with RSA public kev encrvotion , comprising: 
j terminals including first and second terminals, each of the j terminals being characterized by an 
encoding key Ei =(ei, ni) and decoding key Dj =Kdi, nj), where i=l,2, . . . j, each of the j 
terminals being adapted to transmit a particular one of the message signals where an i* 
terminal corresponds to an i^ -message signal M ; is transmitted fi-om an i^^ terminal , and 
0<M/<n/-l, 

ni being a composite number of the forai 
where 

k is an integer greater than 2, 

Pi.u p/;2> • • • Pa ^® distinct random prime numbers, 

ei is relatively prime to 
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\cm{pi\AyPi^2A, . . ./7/,ifc-l), and 

dj is selected from the group consisting of the class of numbers equivalent 

to a multiplicative inverse of 

a (mod(lcm((pi.i -1), (pij -1), . . . , (p^ -1)))); 

said first terminal including 

means for encoding a digital message word signal Mi to be transnfiitted 
from said first terminal (i=l) to said second terminal (i=2), said encoding 
means transforming said digital message word signal Mi to a signed 
message word signal Mis using a relationship of the form 



10. (Am e nd e d) The — commimication syst e m — ef — claim — 9 — furth e r — comprising: 

M = Af J (mod Tij ) : and 

means for transmitting said signed message word signal Mis from said first terminal to said 
second terminal, wherein said second terminal includin g includes 

means for decoding said signed message word signal Mis to said digital message 
word signal M^jl^ 

10. (Twice Amended'^ The system of claim 9. wherein the means for decodi ng said signed 
message word signal M^ includes means for transforming said signed message word 
signal M^ using a relationship of the form 

M, =M,/»(modn,). 

11. (Twice Amended") A communications system for transferring a message signal 

crvDtogranhicallv processed with RSA public V ev encryption, the communications system 
comprising: 

j communication stations including first and second stations, each of the j communication 

stations being characterized by an encoding key Ei=(ei, n\) and a decoding key Dj =(di, 
Reissue 09/694.416 8 Document #267082 
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iii), where i=l, 2,. . . , j, each of the j communication stations being adapted to transmit a 
particular one of the message signals where an i^^ message signal Mi is received from an 

communication station corr o Gponds to an i^ - m e ssag e signal M^ , and 
0<Mi<nrl 

n, being a composite number of the forai 
where 

k is an integer greater than 2, 

Pi.h Pi;2, . ■ - ,pi,k are distinct random prime numbers, 

ei is relatively prime to lcm(pi,i -l,Pi^ -1, . . . ,pi,k-l), and 

di is selected from the group consisting of the class of numbers equivalent to a 



means for encoding a digital message word signal Mi to be transmitted 
from said first station (i=l) to said second station (i=2). 



signal [M ^'] M i" being a number representative of a portion of said 

message word signal Mi in the range 

0<M;"</i2-l,and 

means for transforming each of said message block word signals Mi" to a 
ciphertext word signal Ci using a r e latinshin relationship of the form 



multiplicative inverse of 
ei (mod(lcm((pi.i -1), -1), . . . , (pa -1)))). 
said first station including 



means for transforming said digital message word signal £M^Mi to one 
or more message block word signals FMa'] M i", each block word 



12. (Amended) 



^fhe — communications — syst e m — ef — claim — 14 — fttrtli e r — comprising: 



C, -M"/^(mod/Z2)Lffld 
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means for transmitting said ciphertext word signals Ci from said first station to said second 
station, wherein said second station includes 



12. (Twice Amended^ The communications system of claim 11. wherein the deciphering means 



13. (Twice Amended) A system for communications wfitemof a message cryptogranhicallv 
processed with RS A public key encryption , comprising: 
a first station; and 

a second station communicatiyely connected to the first statio n for conununications 
thereb e tw ee n , 

the first communicating station having 
the first station having 



means for deciphering said ciphertext word signal s C^^ using P22f ^2. 



■kto 



produce sai d message word sig;nal Mi, 



includes 



means for decoding said ciphertext word signals Ci to said message block 
word signals Mi " using a relationship of the form 

M",sC/Hmod/i2),and 

means for transforming said message block word signals Mi" to said 
message word signal Mi. 



encoding means for transforming a transmit message word signal M to a 
ciphertext word signal C where ^transmit message word signal M 
corresponds to a number representative of a message and 



0<M<nA 
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where the ciphertext word signal C corresponds to a 
number representative of an encoded form of said message 
through a relationship of the form 

C= Oe +ae.i M"'^ +. . . +ao (mod n) 

where e and ae, a^-i, . . . , ao are numbers; and 



means for transmitting the ciphertext word signal C to the second station, wherein the 
second station includes means for deciphering the chinertext word si gnal C using the at 
least 3 factors to produc e the message. 

New Claims: 

14. (New Amended^ A method of prQCQaGin g communicating a message for uoo in 
r , r\7ptnprnphin cnmmunications crvpto graphically proces s ed with an RSA pubhc kev encryp tion, 
comprising the steps of: 

selecting a public key portion e associated with a recipient inten ded for receiving the message: 

developing k distinct random prime numbers, p\, pi, - > *Pkj where k>3, and checking that each 
of the k distinct random prime numbers minus 1, /?i-l, /?2-l» • • • A-U is relatively prime 
to the public key portion e; 

computing a composite number, n, as a product of the k distinct random prime numbers^-^ad; 

receiving a ciphertext message formed bv encoding a plaintext message data M to ciphertext 
message data C using a relationship of the form C= (mod n), where Af represents the 
message, where 0<M <>i-j ^l and where the sender knows n and the public key portion e 
but has no access to the k distinct random prime numbe rs, py. p? vv: and 

deciphering at the recipient the received ciphertext m essag e data C to prod uce the message, the 
recipient having access to the k distinct random p rime numbers^ p^. pv. 
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15, (New Amended't The method according to claim 14, comprising the further step of: 
establishing a private key portion J by a relationship to the pubUc key portion e in the form of 

f^d ^ e'\mod{{p, -^lyip, -ly-ip, -1))). 

wherein the deciphering step includes decoding the ciphertext message data C to the plaintext 
message data M using a relationship of the form Afs (mod n). 

16. (Ne wAmended't A method of processin g communicating a message for ugo in 
cryptographic communications crvptographicallv processed with RSA public kev encryption, 
comprising the steps of: 

selecting a public key portion e; 

developing k distinct random prime numbers, /?2, • • • A> where ^ > 5, and checking that each 
of the k distinct random prime numbers minus 1, p2-l> • . . Pk-1, is relatively prime 
to the public key portion e; 

establishing a private key portion dhya relationship to the public key portion e in the form of 

d ^ e'' (mod(07, - 1) . " 1) • • • iP, - 1))) ; 
computing a composite number, /i, as a product of the k distinct random prime numbers; 

obtainin g receiving a ciphertext message data C; anddecoding the ciph e rt e xt moooago data C to 
representing an encoded form of a plaintext message dat a M: and 

decoding the received ciphertext message data C to the plaintext message data M using a 
relationship of the form M= (mod n \ the decoding performed by a recipient owning 
the private kev portion d and having access to the k distinct random prime numbers, pi^^ 



Reissue 09/694.416 Document #267082 

' S V/202975.01 

01052001/16:57/20206.11 





Attorn e y Dock e t No.: 20206 - 125 
OLD VER. 



17. fNew Amended) The method according to claim 16, comprising th e further stop of: 
wherein the ciphertext message data C is formed bv encoding the plaintext message data M to the 
ciphertext message data Q using a relationship of the form C=M^ (mod /i), wherewherein 0<M 
<w-4 ^1 and wherein n and the public key portion e are accessible to the se nder although it has no 
access to the k distinct random prim e numbers, p^, ^■ 

18. (New Amended'i A method of procesGin g communicating a message for ugo in 
rryptngrnphir onmmunicQtions crvpto graphically processed with RSA public kev encryption: 
comprising the steps of: 

selecting a public key portion e; . 

developing k distinct random prime numbers, p\, pi, - - - Pky where k^3^ and checking that each 
of the k distinct random prime numbers minus 1, />i-l, • • • Pk-1, is relatively prime 
to the public key portion e; 

establishing a private key portion d by a relationship to the public key portion e of the form 



computing a composite number, n, as a product of the k distinct random prime numbers; 

encoding a plaintext message data M with the private key portion d to produce a signed message 
Ms using a relationship of the form AfgS M"^ (mod n), where 0<M ^-irl 

receiving th e si^ed message Md and 

deciphering the signed message to produce t he plaintex t message data M 

19. (New AmendedV The method of claim IS fnrthor nnmpripin Q lS, wherein the deciphering 
step e fincludes : 

decoding the signed message Ms with the public key portion e to produce the plaintext message 
data M using a relationship of the form Ms Mg^ (mod w). 
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20. (New Aniended'i A method for increasing the officiencv o f communicating a cryptographic 
pFeeess message crvptograDhicaliv processed with RSA public key encryption , comprising the 
steps of: 

selecting a public key portion c; 
developing k 

sending ta a recipient a crypto graphically processed messag e formed bv 

assiging a mimber Mto represent the message in plaintext message form, and 
cryptographically transforming the assigned number M from the plaintext message form 

to a number C that represents the message in an encoded form, wherein the 

number C is a function of 

the assigned number 

a number n that is a composite number equaling the product of at least three 
distinct random prime numbers, pATp ^y * - > J^k^ wh e r e k 3, and ch e cking 
that e ach of th e I cw herein Q<M <h-l . and 
an exponent e that is a number relatiyely prime to a lowest common multiplier of 
the at least three distinct random prime number s minus 1, p ^ , 1, /?3 1, . . . 
p\ i 1, is r e latively prime to th e public key portion c; 

computing a composit e numb e r, n, as a product of the k distinct random prim e munbors; and^ 

wherein the number n and exponent e having been obtained by the sender are associated 
with the recipient to which the message is in tended: and 
receiving the cryptographically processed message which is decipher able bv the recipient based 

m 

the number n. 

another exponent d. and 

the number C 

wherein the exponent d is a function of the exponent e and the at least three distinct 
random prime numbers. 
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21 . (Amended^ The method according to claim 20, 

nr.nnHir.rr ^ pinir . fnvt rr^nrrn^n rlfitn M to n ciphcrtoxt mossago data Cwhcrcin thc 
crvDtQgraphicallv transforming step includes using a relationship of the form C= 
(mod n), where 0<M <n 1^ 

wh e reby a computational spe e d of the cryptographic proc e so is incr e as e d. 

21. (New) The method according to claim 20, comprioing the further st o p of: 

establishing a private key portion ^ by a relationship to the pubhc key portion o in th e form of 
7-aed 

H a noHi'r.rr ti->o nipi.»>rfpvt inr^rmrrp Hfitn C to thp plnintfixt monr3agQ data M wherein the exponent d 
is established based on the at least three distinct random pr ime numbers, p^ , p^r - - ■ P^ 
using a relationship of the form d = e'^ (mod((p, - 1) • (;?2 " 1) " * ' (Pk " 1))) tffld 

wherein the crvptogranhicallv processed message is deciphere d using a relationship of the form 
MsC^(modn). 

22. (New VAmended^ A method for inrrnnnin f T the officiencv ofcommunicating a cryptographic 
pfoeess message crvptopraphicallv processed with RSA public kev encryption, comprising the 
steps of: 

s e l e cting a public key portion c; 

developing k distinct random prime numbers, p ^T^ar^-^^rP k^ whore k J, and checking that e ach 
ef 

receiving from a sender a crvptographicallv processed messag e, in the form of a number C 
which is decipherable bv the k distinct random prime numb e rs minus l,/? 4 - l./^a 1. ■ ■ - /^ 
1, is relatively prim e to the public key portion c; 

establishing a private key portion J by a relationship to the public key portion c in the form of 
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rnmputm p r ecipient based on a rnmpomt o niimb e m umber n . n, ao a product of tlio k distinct 
random primo numb e rs; 

nhtnmmn fi HpViPrtPYt mor.r . fiPG data C: an d an expon e nt and the number C: and 

dnrndmo tho ciphQrtGxt decinherinp the crvDtog ra phicall v processed message data C to a ^ 

wherein a number M represents a p laintext form of the messap o data M . wherein the 
number C represents a crvptographicallv encoded form of the message and is a 
function of 
the number 

the number n that is a composite numb er equaling the product of at least three 

distinct random prime numbers, wherein 0<M ^-\. and 
an exponent e that is a number relatively prime to a lowest common multiplier of 

the at least three distinct random prime numbers. 
wherein the number n and exponent e are associ ated with the recipient to which 

the message is intended, and 
wherein the exponent is a funct ion of the exponent e and the at least three 

distinct rando m prime numbers. 

23. (Amended) The method according to claim 22. 

wherein the number C is formed using a relationshi p of the form Cs (mod n\ 
wherein the exponent d is established based on the at l east three distinct random prime numbers, 
Pi^, p?T ■ ■ ■ pk using a relationship of the form d = e'^ (mod((Pi - 1) • " 0 ' ' ' iPk " 0)) * 

and wherein the number M is obtained using a r elationship of the form Ms (mod w)^ 
wh e r e by a computational spe e d of th e cr>ptographio proc e ss is incr e as e d. 

23. (>Jow) Tho method according to claim 22, comprismg tho further stop of: 

oncoding the plaintext mGosag e data M to tho oiphortojct moosago data C, iioing a rolatiouDliip of 

the form C= Af ^ (mod n), whoro 0<M r?i 1 . 
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